pypi

5,093 tracked vulnerabilities.

CVE-2017-1000484 MEDIUM
Plone 2.5-5.1rc1 - Open Redirect via Specific URL Parameter
Jan 03, 2018
CVSS 6.1
EPSS 0.01
CVE-2017-1000469 CRITICAL
cobbler < 2.8.2 - OS Command Injection via Add Repo Component
Jan 03, 2018
CVSS 9.8
EPSS 0.06
CVE-2017-1000483 MEDIUM
Plone 2.5-5.1rc1 - Unauthenticated Private Content Access via str.format in Through-the-Web Templates
Jan 03, 2018
CVSS 6.5
EPSS 0.01
CVE-2017-1000482 MEDIUM
Plone 2.5a1-5.1rc1 - Stored Cross-Site Scripting via Home Page Member Property
Jan 03, 2018
CVSS 5.4
EPSS 0.01
CVE-2017-1000481 MEDIUM
Plone 2.5-5.1rc1 - Open Redirect via Login Form 'came_from' Parameter
Jan 03, 2018
CVSS 6.1
EPSS 0.01
CVE-2017-1000433 HIGH
pysaml2 < 4.4.0 - Improper Authentication via Python Optimization Mode
Jan 02, 2018
CVSS 8.1
EPSS 0.03
CVE-2017-1000426 MEDIUM
MapProxy < 1.10.3 - Cross-Site Scripting in Demo Service
Jan 02, 2018
CVSS 6.1
EPSS 0.01
CVE-2017-1000450 HIGH
OpenCV < 3.3.0 - Integer Overflow in FillUniColor and FillUniGray
Jan 02, 2018
CVSS 8.8
EPSS 0.03
CVE-2017-18009 HIGH
OpenCV 3.3.1 - Heap-Based Buffer Over-Read in HdrDecoder::checkSignature
Jan 01, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-17760 MEDIUM
OpenCV 3.3.1 - Buffer Overflow in cv::PxMDecoder::readData
Dec 29, 2017
CVSS 6.5
EPSS 0.02
CVE-2017-16876 MEDIUM
mistune < 0.8.1 - Cross-Site Scripting via _keyify Function
Dec 29, 2017
CVSS 6.1
EPSS 0.02
CVE-2017-17516 HIGH
Reddit Terminal Viewer 1.19.0 - Command Injection via BROWSER Environment Variable
Dec 14, 2017
CVSS 8.8
EPSS 0.01
CVE-2017-12155 MEDIUM
openstack-tripleo-heat-templates - Info Disclosure
Dec 12, 2017
CVSS 6.3
EPSS 0.00
CVE-2017-17554 MEDIUM
aubio 0.4.6 - Denial of Service via NULL Pointer Dereference in aubio_source_avcodec_readframe
Dec 12, 2017
CVSS 5.5
EPSS 0.01
CVE-2017-17458 CRITICAL
Mercurial < 4.4.1 - Remote Code Execution via Malformed Git Subrepository
Dec 07, 2017
CVSS 9.8
EPSS 0.06
CVE-2017-17051 HIGH
OpenStack Nova 16.0.3 - Authenticated Denial of Service via Repeated Instance Rebuild
Dec 05, 2017
CVSS 8.6
EPSS 0.02
CVE-2017-17054 MEDIUM
aubio 0.4.6 - Denial of Service via Divide-by-Zero in new_aubio_source_wavread()
Nov 29, 2017
CVSS 5.5
EPSS 0.01
CVE-2017-14176 HIGH
Bazaar <2.7.0 - Remote Code Execution
Nov 27, 2017
CVSS 8.8
EPSS 0.06
CVE-2017-7550 CRITICAL
Ansible <2.3.3, <2.4.1 - Info Disclosure
Nov 21, 2017
CVSS 9.8
EPSS 0.04
CVE-2017-16613 CRITICAL
OpenStack Swauth <1.2.0 - Auth Bypass
Nov 21, 2017
CVSS 9.8
EPSS 0.08
CVE-2017-1000246 MEDIUM
Python pysaml2 <4.4.0 - Info Disclosure
Nov 17, 2017
CVSS 5.3
EPSS 0.01
CVE-2017-16239 MEDIUM
OpenStack Nova <14.0.9, <15.0.7, <16.0.2 - Privilege Escalation
Nov 14, 2017
CVSS 6.5
EPSS 0.01
CVE-2017-0906 CRITICAL
Recurly Client Python Library <2.0.5-2.6.2 - SSRF
Nov 13, 2017
CVSS 9.8
EPSS 0.03
CVE-2017-16764 CRITICAL
django_make_app 0.1.3 - Command Injection
Nov 10, 2017
CVSS 9.8
EPSS 0.04
CVE-2017-16763 CRITICAL
Confire 0.2.0 - Remote Code Execution via YAML Parsing in config.py
Nov 10, 2017
CVSS 9.8
EPSS 0.04
Products
tensorflow 427 tensorflow-gpu 421 tensorflow-cpu 417 Django 147 apache-airflow 128 open-webui 101 Plone 96 mlflow 77 apache-superset 67 salt 67 ansible 66 pillow 60 vllm 52 nova 49 gradio 48 matrix-synapse 44 pyload-ng 44 rdiffweb 43 keystone 40 vyper 39 moin 35 aiohttp 34 opencv-contrib-python 30 opencv-python 30 langflow 28 pypdf 28 PraisonAI 27 litellm 27 pgadmin4 26 openbabel 24
Quick Filters
Critical CVEs With Exploits In CISA KEV